$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/3eecc85e-c9f3-489a-b550-f7a900d63926.roa File: 3eecc85e-c9f3-489a-b550-f7a900d63926.roa (raw, json) Hash identifier: Td7hhXFkr5yluUOXdD8eZR0CEoUbjd9Q013mxX5AP4c= Subject key identifier: 99:26:F7:A5:2F:72:EF:C5:01:28:C5:0F:92:00:A5:F0:22:27:A9:3F Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 5E540024BBCD3401239B5F5D2924E69DAFE2DA63 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/3eecc85e-c9f3-489a-b550-f7a900d63926.roa Signing time: Fri 07 Nov 2025 00:00:46 +0000 ROA not before: Fri 07 Nov 2025 00:00:46 +0000 ROA not after: Fri 12 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf2:6000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 22 Nov 2025 00:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:54:00:24:bb:cd:34:01:23:9b:5f:5d:29:24:e6:9d:af:e2:da:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Nov 7 00:00:46 2025 GMT Not After : Dec 12 23:59:59 2025 GMT Subject: serialNumber=77c93bb5e0bc208d629276c31b75e46df0a738968b0e60d378229f7fe39d2b2f, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:6f:a5:cd:39:13:46:73:56:4d:7b:cc:63:f9: 96:55:af:ac:50:a4:a4:96:58:0b:f7:28:a4:21:7f: b9:e4:66:03:82:b3:59:8d:8a:3f:78:ee:e8:99:3f: 78:25:bb:46:06:94:08:6c:04:9d:9d:39:35:95:dd: e9:8e:4c:7a:20:67:08:ff:38:22:c2:95:b2:50:82: aa:29:f3:9d:8a:48:f1:60:28:02:46:08:3c:7c:1c: 12:ff:1d:c6:18:48:da:e2:68:91:df:dc:ba:3b:5d: 49:0b:3f:77:ee:16:14:65:8d:de:2f:b9:4e:f1:92: 1d:6a:91:11:50:18:cd:c1:21:35:63:e5:45:6e:1f: 95:ce:e5:41:04:51:82:87:f4:9f:bc:51:f8:31:15: 36:06:df:ce:78:4e:a2:43:57:d4:3c:d9:9d:99:56: 7c:fc:68:67:a4:90:75:75:5e:0a:f4:bf:44:6c:5b: 4e:71:94:ca:7d:d3:e9:e5:bc:da:03:c9:35:8a:09: 00:cd:57:7d:98:96:49:21:1e:fc:4d:88:52:e0:f0: 27:62:d7:54:9e:a1:75:a7:93:9b:36:57:54:0f:2b: 35:66:bb:01:d4:00:99:7c:9d:7e:b9:97:2f:f3:fe: 81:b0:31:e1:e2:be:d2:8a:27:d5:ed:72:e2:4e:4f: ad:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:26:F7:A5:2F:72:EF:C5:01:28:C5:0F:92:00:A5:F0:22:27:A9:3F X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/3eecc85e-c9f3-489a-b550-f7a900d63926.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf2:6000::/40 Signature Algorithm: sha256WithRSAEncryption 07:ca:22:e7:b7:2d:2a:15:42:aa:b1:91:34:13:11:1d:bf:27: c8:b0:ea:0f:1d:31:06:47:78:69:62:c2:28:b0:24:7b:f8:04: 7e:2a:cd:cd:61:12:b3:77:c5:c5:ad:64:17:ab:88:a9:df:9e: c7:80:60:88:bc:03:ae:8c:43:00:74:94:eb:f7:f6:67:ff:4b: fb:0f:a1:f4:16:a4:ee:31:c7:f0:17:c7:29:41:bd:89:96:c1: b2:5f:33:17:ab:21:70:42:3d:22:15:30:27:78:58:b9:e6:7a: d4:4f:f2:aa:6d:0d:b6:41:8e:00:66:d1:d2:69:35:2e:9c:e7: 47:87:80:67:29:e3:ac:7d:f7:16:74:86:2c:d6:45:69:ad:79: 83:4f:a6:a2:8a:59:ce:b1:f1:31:80:7b:92:da:8c:1f:6a:d1: 12:b3:dd:02:ff:2d:48:1b:53:43:35:76:b7:5f:de:de:c6:bd: fe:e7:33:be:92:2e:b0:23:2c:d4:86:6a:d2:df:44:87:39:aa: 7b:16:75:db:8f:25:b3:7a:fb:3f:b4:69:3c:19:c9:5e:5e:75: 3f:02:cc:53:7a:91:67:0e:cb:fa:41:46:09:b3:8b:76:f3:8d: ed:9d:83:7c:22:89:80:48:b4:44:6e:59:e3:53:6d:6e:fb:48: 0a:a0:4e:c6 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUXlQAJLvNNAEjm19dKSTmna/i2mMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTEwNzAwMDA0NloX DTI1MTIxMjIzNTk1OVowejFJMEcGA1UEBRNANzdjOTNiYjVlMGJjMjA4ZDYyOTI3 NmMzMWI3NWU0NmRmMGE3Mzg5NjhiMGU2MGQzNzgyMjlmN2ZlMzlkMmIyZjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy2+lzTkTRnNWTXvMY/mWVa+sUKSk llgL9yikIX+55GYDgrNZjYo/eO7omT94JbtGBpQIbASdnTk1ld3pjkx6IGcI/zgi wpWyUIKqKfOdikjxYCgCRgg8fBwS/x3GGEja4miR39y6O11JCz937hYUZY3eL7lO 8ZIdapERUBjNwSE1Y+VFbh+VzuVBBFGCh/SfvFH4MRU2Bt/OeE6iQ1fUPNmdmVZ8 /GhnpJB1dV4K9L9EbFtOcZTKfdPp5bzaA8k1igkAzVd9mJZJIR78TYhS4PAnYtdU nqF1p5ObNldUDys1ZrsB1ACZfJ1+uZcv8/6BsDHh4r7SiifV7XLiTk+tDQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFJkm96Uvcu/FASjFD5IApfAiJ6k/MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzNlZWNjODVlLWM5ZjMtNDg5YS1iNTUwLWY3YTkwMGQ2MzkyNi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba8mAwDQYJKoZIhvcNAQELBQADggEBAAfKIue3LSoVQqqxkTQT ER2/J8iw6g8dMQZHeGliwiiwJHv4BH4qzc1hErN3xcWtZBeriKnfnseAYIi8A66M QwB0lOv39mf/S/sPofQWpO4xx/AXxylBvYmWwbJfMxerIXBCPSIVMCd4WLnmetRP 8qptDbZBjgBm0dJpNS6c50eHgGcp46x99xZ0hizWRWmteYNPpqKKWc6x8TGAe5La jB9q0RKz3QL/LUgbU0M1drdf3t7Gvf7nM76SLrAjLNSGatLfRIc5qnsWdduPJbN6 +z+0aTwZyV5edT8CzFN6kWcOy/pBRgmzi3bzje2dg3wiiYBItERuWeNTbW77SAqg TsY= -----END CERTIFICATE-----Generated at Tue Nov 18 10:39:59 2025 by rpki-client